In that case, the large majority of the hacked/leaked accounts should be bot accounts. I wonder if that is something that can be checked and verified. Maybe most of those accounts can be traced back to a few points of origin, done in bulk by some sort of shady service hired via the dark web.